NanoClaw at a glance
Gavriel Cohen released NanoClaw on January 31, 2026: a personal Claude assistant with a core of roughly 500 lines of TypeScript, where each agent runs in its own container and sees only the folders you mount. It reached chat apps through skills and later partnered with Docker.
What changed with NanoClaw
NanoClaw's first commit, on January 31, 2026, described it as a personal Claude assistant over WhatsApp. Its creator, Gavriel Cohen, a former Wix engineer, built it in response to what he saw as the security risks of large agent frameworks that run directly on the host, and released it under the MIT license.
Instead of giving one agent the run of the computer, NanoClaw runs each agent in an isolated Linux container, using Apple's container runtime on macOS and Docker on Linux. An agent can only read and write the directories the user mounts. VentureBeat reported that the core logic is about 500 lines of TypeScript, built on Anthropic's Claude Agent SDK, so a developer can read the whole thing.
WhatsApp was the default channel; other channels such as Telegram and Gmail are added through skills that modify the local install rather than through a growing core. VentureBeat reported the project passed 7,000 GitHub stars in just over a week, as developers looked for a safer way to try always-on personal agents during the OpenClaw boom.
NanoClaw in numbers
Values are copied from the linked source on the date shown. They are not IA Compa measurements.
- GitHub stars (nanocoai/nanoclaw)as of · Source for GitHub stars (nanocoai/nanoclaw): github.com (opens in a new tab)
- 31,087
Where to compare NanoClaw
Independent leaderboards and official resources for comparing this model yourself. Rankings change often; each site shows its own current data.
Why NanoClaw matters for businesses
NanoClaw's approach, small code you can audit plus OS-level isolation per agent, is a practical pattern for any business piloting agents. Mount only the folders an agent needs, give each agent its own credentials, and treat anything it reads from email or chat as untrusted input.
Put it to work: AI Agents
NanoClaw updates since publication
Dated changes since publication. The original article text above is kept as written on its date.
Update (Updated)
NanoCo, the company Cohen formed with his brother Lazer, added Slack agent teams in which each agent gets its own bot identity. VentureBeat reported NanoClaw 2.0 in April added a credential gateway with human approval, and a $12 million seed round in May.
venturebeat.com (opens in a new tab)Availability
NanoClaw partnered with Docker so agents can be deployed with one command inside Docker Sandboxes, which isolate each agent in a microVM. Docker said NanoClaw had passed 20,000 GitHub stars by then.
docker.com (opens in a new tab)
Sources for this story
- nanocoai/nanoclaw repository (opens in a new tab)Official
GitHub · github.com
- NanoClaw initial commit (January 31, 2026) (opens in a new tab)Official
NanoClaw on GitHub · github.com
- NanoClaw (opens in a new tab)Official
NanoCo · nanoclaw.dev
- NanoClaw Partners with Docker to Help Teams Run AI Agents Safely, Everywhere (opens in a new tab)Official
Docker · docker.com
- NanoClaw solves one of OpenClaw's biggest security issues, and it's already powering the creator's biz (opens in a new tab)Press
VentureBeat · venturebeat.com
- NanoClaw comes to Slack, letting you create persistent AI agent teams and colleagues from a single message (opens in a new tab)Press
VentureBeat · venturebeat.com
Last verified: . IA Compa summarizes public announcements for business readers. We are not affiliated with the companies mentioned. Always confirm details, pricing, and availability with the official source.
- #agents
- #nanoclaw
- #openclaw
- #open-source
- #agent-security
- #containers
- #personal-agents
